OF RECORD

The following principles represent an important step in Penn's administrative
development. Not only will these principles guide Project Cornerstone and
other structured efforts, but they will be helpful to anyone using information
technology at Penn.

3. Cost-effectiveness. Information technology must contribute
to the cost-effectiveness of the functions it supports and must be cost-effective
from the perspective of the University as a whole.

4. Policies, standards, and models. Policies, standards,
models, and methodologies-based on the principles outlined here-govern
the acquisition and use of data and information technology. Regular update
and communication are required.

5. Investment criteria. Investment decisions (even those
not to take action) must be based on University needs, cost-effectiveness,
and consistency with standards and models.

6. Training and support. Penn must put sufficient effort
into ongoing support of its information technology assets. Skills and experiences
from across the University must be leveraged and communication channels
opened.

University Data

7. Accuracy. University administrative data must be accurate
and collected in a timely way.

8. Security and confidentiality. University administrative
data must be safe from harm and, when confidential, accessible only to
those with a "need to know."

9. Ease of access. University administrative data must
be easy to access for all groups of authorized users regardless of their
level of technical expertise.

Infrastructure

19. Connections within the University. The communications
infrastructure must be standardized to allow reliable, easy interaction
among individuals, work groups, departments, schools, and centers.

20. Connections outside the University. The communications
infrastructure must comply with national and international standards that
allow reliable, easy interaction with those communities.

21. Hardware and software choices. Administrative hardware
and software will be limited to a bounded set of alternatives. This applies
to desktop computing, application servers, communications components, application
development tools, and data management tools.

Organization

23. Data stewards. Data stewards are responsible for
ensuring the appropriate documentation, collection, storage, and use of
the administrative data within their purview.

24. Process owners. Process owners are responsible for
developing and maintaining the standards, structures, and applications
that ensure the quality and cost-effectiveness of specific administrative
processes.

25. Information Systems and Computing (ISC). Information
Systems and Computing provides leadership, infrastructure, standards, services,
and coordination that permit Penn to take full advantage of its information
technology assets.

26. Schools and administrative centers. Schools and centers
are responsible for creating data and using information technology to meet
the objectives of their organizations.